DllCanUnloadNow
Behavioral task
behavioral1
Sample
b81b94d0494225944f86f680b70756fe8def2d5ed07a6c7bec2cb7b9cbebf785.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b81b94d0494225944f86f680b70756fe8def2d5ed07a6c7bec2cb7b9cbebf785.dll
Resource
win10v2004-20221111-en
General
-
Target
b81b94d0494225944f86f680b70756fe8def2d5ed07a6c7bec2cb7b9cbebf785
-
Size
28KB
-
MD5
c187ac6bcea8299d36b8eec56414de7f
-
SHA1
677f2630ecc2dfb1a446a8ad44a2d72b6d60fad6
-
SHA256
b81b94d0494225944f86f680b70756fe8def2d5ed07a6c7bec2cb7b9cbebf785
-
SHA512
664142e4fbdaf848a3300ae9ca0ea413dfe53b81fb48282137046f58091b94bdf001b2fe7827c070f2e06e4dc214c6c273cf36aff40ccbc4fe08faf0de05a229
-
SSDEEP
192:qyxyUQ6g+22CZQ/g2QqlCkQV1V9rC9S0hHPaPHiEK0YBLhTrRF/qxtWUS:qyhZJcKHd/g1n8SUr0YBLhBItWUS
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
b81b94d0494225944f86f680b70756fe8def2d5ed07a6c7bec2cb7b9cbebf785.dll windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE